JP2002351966A - Secure archive device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To safely store documents in response to a request from a device on the side of users of service. SOLUTION: A service-using device 102 which transmits the request for services and the documents and a secure archive device 104 which receives the information on them are provided. The secure archive device 104 receives the request for the services and documents which a service-requesting person designates from a service-using device (Step 208), and verifies the documents when the documents are judged to be verified (Step 210).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technology related to a system for providing an electronic data storage service via a network. More specifically, the present invention relates to a process for storing a document as electronic data (information) in response to a request from a service user device.

[0002]

2. Description of the Related Art Japanese Patent Application Laid-Open No. H10-207360 discloses a technique relating to a service system for securely storing documents via a network. This prior art discloses a method of proving that a document transmitted by a sender to a recipient in the transmission and reception of an electronic document over a computer network certainly exists at a certain point in the recipient. Specifically, the recipient creates an application for a certificate of existence of the document to be certified, and attaches an electronic signature to the created application and attaches the public key certificate of the sender of the document, Sent to a trusted third party (TTP). When the third party accepts the request, the third party verifies the signature of the request, updates the key revocation list provided by the public key certification body, and updates the document provided by the third party. The updating of the revocation list is suspended, the key and the document are confirmed not to be in the revocation list, and the existence of the document is verified.

[0003]

Documents having various formats (forms) have emerged due to recent advances in computer processing technology and the digitization of work within and between companies. Therefore, a service system that stores documents via a network needs to be able to handle not only documents having a specific format but also a plurality of formats.

[0004] However, the above-mentioned prior art is based on the premise that a document received by the service providing apparatus is given an electronic signature. For this reason, for example, a document without an electronic signature is treated as if it has an electronic signature, so that there is a problem that a useless verification operation occurs. In addition, as for the format, in addition to whether or not an electronic signature is given,
Whether the data is encrypted (plaintext) or has been subjected to a process such as hashing is included.

[0005]

In order to achieve the above object, a secure archive device according to the present invention responds to a document to be registered (stored) based on service request information transmitted from a service using device. Executes information processing for registration.

For example, a secure archive device receives a service request and a document specified by a service requester from a service using device, and indicates a format of the document in a document category (or service request category).
If it is determined that the document needs to be verified according to the above, the document is verified. Here, the document classification may be determined according to service request information transmitted from the service using apparatus transmitted from the service using apparatus. After that, a configuration may be adopted in which a reception certificate including the document existence time proof information is created, and the reception certificate is returned to the service using apparatus.

[0007]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 shows a system configuration of a system showing an embodiment of the present invention. The secure archive service system provides a plurality of service using apparatuses 102A to 102C that transmit a service request and a document in response to a user's operation, and a service for securely storing a document in response to a request from the service using apparatus. It comprises a secure archive device 104. These devices are connected by a communication network 100 and can communicate with each other.

[0008] Each of the service using apparatuses 102 has a storage device for storing a document and a program for realizing the processing described later. The storage device 106 attached to the secure archive device 104 stores information about the user, information about the service request,
A program and data for providing a service function described later are stored. Further, a document to be registered may be registered in the storage device 106.

The above-described storage device is used for storing data (information) in a magnetic disk, a magneto-optical disk, a semiconductor memory, or the like.
Is realized by a device having a function of storing In particular,
The storage device 106 preferably has a large capacity in order to store and manage a larger amount of documents than the storage device in the service use device 102.

[0010] The secure archive device 102
More preferably, the computer is a computer provided with a network connection device that permits a plurality of simultaneous accesses and has a higher processing capability than the service using device 102. Specifically, it can be realized by a large computer or a computer having a plurality of central processing units.

The service using device 102 operated by the user includes an input device such as a keyboard and a mouse, the above-mentioned storage device such as a hard disk and a RAM, an output device such as a CRT display, a liquid crystal display, and a printer, and a communication network. It can be realized by a general-purpose personal computer having a device. Of course, it is not limited to a personal computer, it has an information processing function,
Any computer provided with a communication device capable of communicating with the secure archive device 104 may be used. The service request information, which will be described later, may be created and transmitted independently by the service using apparatus according to the program, instead of being input from the user.

The communication network 100 has a function of transmitting service request information, and includes a data (information) public network,
The present invention can be realized by a communication network such as a wired network such as an SDN network or a wireless network using an artificial satellite for communication.

FIG. 2 is a diagram showing a program process stored in the storage unit 34 of the secure archive device 104. Any of the service utilization devices 102A to 102C (hereinafter,
The user authentication information 20 is simply obtained from the service using device 102).
When 0 is accepted, the user authentication and the service access authority are determined with reference to the user information described later (step 206).

Next, the document 204 to be stored is
And service request 202 for the document 204
Is received (step 208). The document 204 is verified (step 21) by determining the necessity of the verification according to the document 204 as the received data and the verification content.
0).

Subsequently, a reception certificate including the existence time certification information of the document 204 is created (step 21).
2), and transmits the acceptance certificate to the service using device (step 214). Thereafter, the document 204 and the receipt certificate 218, which are the received data, are stored in the storage device 106 as a package, and the operation log 220 is recorded in the same manner (step 216).

The existence time proof information included in the receipt certificate 218 includes the date and time when the secure archive device 104 received the document 204 and a document identifier which is an identifier for identifying the document 204.
The document identifier includes a document name, a document hash value, and the like. To make the existence time certification information more authentic, the secure archive device 104 may add an electronic signature.

Verification of document 204 (step 21)
In (0), the secure archive device 104 refers to a later-described verification definition table 400 stored in the storage device 106 when determining the verification process corresponding to the service request transmitted from the service using device 102, and executes the process. Is done. If no service request is sent, it is also possible to determine the verification process by analyzing the structure of the document. Specifically, S / MIME, which is a known technique,
(Secure / Multipurpose Inter
If the document complies with the standard of “net Mail Extensions”, information describing the type of the document is included in the header portion of the document. Therefore, the verification process is determined by referring to this information. It is possible to do.

3 and 4, an example of the data structure according to the embodiment of the present invention will be described in detail.

FIG. 3 is an example of a user authentication table 300 stored in the storage device 106. The user verification table 300 is referred to when the secure archive device 106 performs a user authentication process and a user authority setting process. The user ID field 302 indicates a user identifier.
The password field 304 indicates a password for the user ID. The usage right field 306 indicates the service usage right of the secure archive device 104 for the user ID.

The secure archive device 104 can authenticate a user who operates the service use device 102 and set an appropriate service use right, so that the security of the system can be enhanced.

FIG. 4 is an example of the verification definition table 400 stored in the storage device 106. Service utilization device 10
2 receives the service request specified by the user and transmits the service request information to the secure archive device 104. The service request information includes a service request category indicating how to register a document. For example, the service request category includes information indicating which of plain text registration for registering a plain text document and hash registration for registering a hashed document in accordance with a user input. The service request category includes a ciphertext registration for registering an encrypted document, a signed hash registration for registering a document obtained by digitally signing hashed data, and a signed hash registration for registering encrypted data. This also includes the registration of a signed ciphertext with a signature. The service request category includes, in addition to the example described above, registration of a document that has been subjected to the combination of “hash”, “signature”, and “encrypt”, which is the above-described processing on data (plaintext). Further, those which have been subjected to data processing such as data compression are also included.
In the present embodiment, the processing is changed depending on whether or not a (digital) signature is given to the document. That is, verification processing is performed on the signed document.

The service request category may be a (valid) registration period and a security level. The registration period indicates a registration period desired by the user. When the registration period is included in the service request information, the secure archive device 104 executes information processing so as to register the period according to the registration period. For example, a registered document and information indicating a registration period are stored in association with each other. The secure archive device 104 may delete the document or return the document to the service user device 102 after the period indicated by this information ends. The present embodiment also includes a configuration in which the secure archive device 104 changes the storage area and the storage device according to the security level. Also, performing access control according to the security level is included in the present embodiment. For example, in accordance with the strength of security, information such as browsing of a registered document is permitted and a password is required to use the document is stored in association with the information, and information processing for permitting access according to the stored content is executed. .

The secure archive device 104 refers to the verification definition table 400 and executes a document verification process (verification action) that matches the transmitted service request. For example, if the transmitted service request category is “register plaintext with signature”, “verify signature” corresponding to “register plaintext with signature” in verification action 406 is executed. If the verification action is “no verification”, the document is registered without verification.

Here, the document 204 to be registered
May be transmitted from the service request information and the service using apparatus 102. Further, the document may be sent separately from the service request information. For example, the information may be sent via a storage medium without passing through the network 100.
Further, a document may be transmitted by a service using apparatus different from the service using apparatus that has transmitted the service request information. In these cases, information for identifying the other may be added to at least one of the service request information and the document.

The service request category field 402 in the verification definition table 400 indicates service request information. The document classification field 404 indicates the type of the document. Validation action field 406
This section shows the contents of the verification process for the received document.

In the above description, an example has been described in which the service category corresponding to the service request input from the user is included in the service request information. Next, an example in which no service division is used will be described.

First, a document 204 to be registered is transmitted from the service using apparatus 102 to the secure archive apparatus 104.

A verification process corresponding to the document segment indicating the type of the transmitted document is executed. That is, using the verification definition table 400, if the transmitted document is “plaintext with signature”, “signature verification” is executed. Here, the document category of the transmitted document is identified as follows. For example, the service using apparatus 102 transmits information indicating the document classification together with the document according to the user's input. The secure archive device 104 performs a verification process according to the document category indicated by this information. Also,
As described above, the S / MINE standard may be used.

By referring to this table, the secure archive device 104 can appropriately perform verification processing on documents having various formats. Therefore, there is no waste of performing unnecessary verification processing.

FIG. 5 shows a secure archive device 104.
Sends a document 2 to the service using apparatus 102.
4 shows a procedure for performing the verification process of FIG. In step 502, when the secure archive device 104 receives the document verification request, the received document 20
4 is received (step 506), and the document 204 is verified (step 506). afterwards,
Return the verification result to the service using device (step 50)
8).

Here, the document verification process in step 506 may be performed by using known public key encryption technology to collate the received document with the existence time proof information in the acceptance certificate. Further, the received document may be collated with the corresponding document stored in the secure archive device.

FIG. 6 shows a secure archive device 104.
Represents a procedure for creating a reception certificate including security level information. The security level is an index indicating how securely the document received by the secure archive device 104 is stored. For example, when an electronic signature is added to the receipt, the length of the key or the strength of the encryption algorithm may be indicated. Which storage device or storage area, such as storing the document on a secure dedicated server, or storing the document on a shared server accessible from any information processing device (including the service use device 102)? Index may be used.

When creating a receipt, the secure archive device 104 sets a security level according to the security level transmitted from the user device (step 602). Here, a security level stored in the secure archive device in advance may be referred to. Further, the security level may be determined according to the format of the document 204. For example, the security level of a document to which an electronic signature has been applied is higher than that of a document to which an electronic signature has not been applied. Also, the encrypted data may be higher than the non-encrypted data.

Further, the security level may be determined by summing requirements such as encryption and the presence or absence of a digital signature. For example, +1 if encrypted
Points are set to +2 points when a digital signature is given, and +0 points when hashed, and registration corresponding to a security level corresponding to the total (+3 points) is performed.

Note that the secure archive device 104
By providing a table that stores an index (including a point) indicating a security level and what processing is to be executed (the above-mentioned server to be registered, etc.) in association with the security level, Registration is feasible.

Next, at step 604, a legible security label is created, and an acceptance certificate to which the security label information is added is created (step 60).
6).

FIG. 7 shows a procedure in which the secure archive device 104 that issues a receipt including a security level creates billing information for the user (or the service using device 102) operating the service using device.

In step 702, a list of user packages is created, and the first entry is obtained (step 7).
04). Subsequently, the following processing is performed on other entries. In step 708, the security label of the document is read, and then a fee table is referred to by referring to a table described later (step 710). Step 7
At 12, a fee for the document is determined. When the charge for the document is obtained, the sum is set as the service charge of the user (step 718). Through the above processing, it is possible to flexibly obtain a service fee according to the security level.

FIG. 8 shows a charge definition table 8 referred to when the secure archive device 104 calculates a service charge.
00 is an example. Security label field 802
Stores security label information. The charge model field 804 indicates a charge model. The charge table position field 806 indicates the network address where the actual charge table data is stored. By using the fee definition table 800, a fee can be calculated for each user or service use device 102, which is a unit for billing the fee. Note that the charge unit may be a predetermined organization (corporation or the like) or a plurality of service using apparatuses 102 other than the individual.

As described above, according to the present embodiment, the secure archive device 104 can appropriately perform verification processing on documents having various formats by referring to the verification definition table. It is possible. Therefore, there is no waste of performing unnecessary verification processing.

Further, it is possible to flexibly obtain a document storage fee according to the security level.

[0042]

According to the present invention, corresponding processing can be realized for each of documents of a plurality of types of formats.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a system showing an embodiment of the present invention.

FIG. 2 is a software configuration and a processing procedure of a secure archive device according to the embodiment of the present invention.

FIG. 3 is an example of a user authentication table.

FIG. 4 is an example of a verification definition table.

FIG. 5 is a document verification procedure of the secure archive device.

FIG. 6 shows a procedure for creating a reception certificate including security level information.

FIG. 7 shows a procedure for creating billing information for a user.

FIG. 8 is an example of a charge definition table.

[Explanation of symbols]

Communication network 100, service utilization device 10
2. Secure archive device ... 104, storage device ... 10
6

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (Reference) G09C 1/00 640 G09C 1/00 640Z F term (Reference) 5B017 AA07 BB06 CA16 5B075 KK07 NK13 NK24 NK45 UU06 5J104 AA09 AA11 PA07 PA14

Claims (9)

[Claims] 1. A secure archive device connected via a network to a service using device that receives a document registration request as electronic information from a user, wherein the document registration transmitted from the service using device is registered. Receiving means for receiving service request information related to the document, and processing means for executing information processing related to registration in accordance with the document requested to be registered based on the received service request information. . 2. The secure archive device according to claim 1, wherein the service request information includes a service request category indicating how to register the document, and the processing unit includes the service request category. A secure archive device that executes the information processing in accordance with the following. 3. The secure archive device according to claim 2, further comprising table storage means for storing a definition table in which a service request classification is associated with information processing to be performed on a document. A secure archive apparatus, wherein information processing corresponding to a service request category included in transmitted service request information is searched from the definition table, and the searched information processing is executed. 4. The secure archive apparatus according to claim 1, wherein the document includes a signed document in which an electronic signature is applied to electronic data, and the processing unit determines that the registration target is a signature. In the case of an attached document, a process for verifying the electronic signature is executed. 5. The secure archive device according to claim 4, wherein the service request information includes a service request category indicating how to register the document, and the processing unit includes the service request category. Performs a process of verifying the electronic signature according to the document. 6. The secure archive device according to claim 4, wherein the processing unit creates a receipt showing that the registration target has been accepted, and transmits the receipt to the service using device. A secure archive device for performing processing. 7. The secure archive device according to claim 1, wherein the receiving unit receives the document to be registered from the user device. 8. The secure archive device according to claim 1, wherein the document to be registered is defined by S / MINE, and the processing device records a type of the document included in the document to be registered. According to the type information,
A secure archive device for executing information processing related to the registration. 9. The secure archive device according to claim 8, wherein the processing device is configured to, when the type information indicates that the document to be registered is a digitally signed document. A secure archive device for executing a signature verification process.